Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6t9McBYEtAXc2_L4SwVnBm1c7Tk.roa
File: 6t9McBYEtAXc2_L4SwVnBm1c7Tk.roa (raw, json)
Hash identifier: MpbStza8KybrBoxKEoEFxXgCL8ldLDSZnQ7W2HW/rsY=
Subject key identifier: EA:DF:4C:70:16:04:B4:05:DC:DB:F2:F8:4B:05:67:06:6D:5C:ED:39
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0182ABD3FB78D60A9C30D30CC10C666DE036
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6t9McBYEtAXc2_L4SwVnBm1c7Tk.roa
Signing time: Wed 17 Aug 2022 12:42:52 +0000
ROA not before: Wed 17 Aug 2022 12:42:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 152.89.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:d3:fb:78:d6:0a:9c:30:d3:0c:c1:0c:66:6d:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Aug 17 12:42:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eadf4c701604b405dcdbf2f84b0567066d5ced39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:b5:71:db:ad:37:8d:9c:99:9b:8d:d2:bf:
6d:bd:a2:22:e3:58:1d:6a:c4:c7:d1:39:92:e4:d4:
e6:1d:f6:44:70:78:08:db:85:4d:a4:3e:23:d3:a6:
fc:13:1b:82:7a:28:3f:28:f5:2f:35:74:94:3b:16:
0e:68:47:e4:5b:71:fa:df:ee:43:24:d5:19:09:ab:
3e:c7:81:0e:91:81:c2:aa:0d:55:39:78:86:94:46:
e6:23:b9:e7:c8:8b:ef:b3:10:e5:db:43:48:cd:83:
a8:c6:7e:21:25:d2:02:1f:a2:b0:2d:d1:c6:f4:38:
0f:28:0b:34:b5:52:ab:7c:3d:5b:6c:f1:c0:3b:8f:
dc:d8:25:2d:b0:e4:65:56:b7:15:7e:fd:bd:c6:cf:
63:9e:d7:83:df:e9:e1:c9:a3:83:1e:cd:68:ae:fb:
a3:f3:08:f1:36:de:a4:9e:41:37:05:99:de:26:60:
b6:1a:a3:e2:7e:bf:c6:2b:e2:04:de:8d:bb:ef:9a:
c7:12:42:c8:6f:f7:59:5a:40:a0:2c:8a:56:ff:aa:
42:b9:ae:2a:0f:56:1b:0b:cf:86:83:f6:d9:ba:a4:
5e:79:e8:4a:f1:cc:21:a4:22:d1:4a:c9:42:91:34:
c6:bd:aa:a4:3b:a1:35:38:3a:4e:1c:28:e2:f2:a1:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:4C:70:16:04:B4:05:DC:DB:F2:F8:4B:05:67:06:6D:5C:ED:39
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6t9McBYEtAXc2_L4SwVnBm1c7Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a3:d2:0b:d6:e8:99:46:f0:2f:1a:34:ab:1b:19:07:d8:46:
e7:6e:bc:e0:2b:9e:59:d7:18:09:3c:aa:7b:4d:36:12:40:57:
c7:3c:29:c7:28:73:0b:99:2e:cc:57:b3:e9:62:61:5b:08:e7:
58:fd:db:f7:99:2d:9d:6e:33:bb:1b:f9:02:7f:28:1a:8c:22:
6d:73:52:cc:66:1e:68:87:c1:7e:61:ca:3b:5c:a4:b5:4c:a8:
4c:a0:83:bc:35:5e:4e:36:2e:84:12:c2:d4:ef:38:a8:0c:a8:
7b:29:4b:70:17:3e:27:eb:2c:67:f6:f5:c0:0b:5a:88:b4:d0:
61:27:2a:e2:c7:44:c8:a6:99:2d:42:65:23:10:a2:f2:6b:89:
2d:29:13:9e:97:51:80:c6:4d:8a:bb:3b:52:c0:e4:56:b8:ae:
ee:90:45:09:3f:30:bc:a9:3b:58:71:32:d8:3b:fb:1d:e8:9d:
59:8a:67:24:53:15:e1:fd:ef:a6:e1:02:08:c3:59:53:8a:74:
b1:2e:12:d6:0c:22:59:f1:5e:f7:7a:b9:8f:db:94:36:1c:b1:
80:d6:85:b9:68:66:39:21:bf:61:c8:8d:18:6d:59:f8:e1:18:
6b:02:2d:3c:35:d0:22:98:cc:67:f9:7d:04:bd:52:e9:62:89:
91:cc:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:38 2025 by rpki-client